feat: add lanzaboote

- Added lanzaboote
- Disabled systemd-boot in favor of lanzaboote
- Added sbctl
This commit is contained in:
lightly-toasted 2025-08-28 22:37:42 +09:00
parent dfc4f9ba9d
commit b738736f94
5 changed files with 182 additions and 6 deletions

View file

@ -1,7 +1,12 @@
{ config, pkgs, ... }:
{ config, pkgs, lib, ... }:
{
boot.loader.systemd-boot.enable = true;
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.loader.efi.canTouchEfiVariables = true;
boot.supportedFilesystems = [ "ntfs" ];
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
}